CVE-2022-42477

HIGH · CVSS 7.1 EPSS 0.19%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-04-11 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-42477

Severity

HIGH

CVSS

7.1

EPSS

0.19%

Original NVD Description

An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries.